Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: ninenines Component: Cowlib Clear all filters
TI-2026-32011 CVE-2026-43966 · GHSA-w4f7-4cxr-rv3c

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

Priority LOW 28

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00259 Published 2026-06-08 Fixed in 2.16.0 CWE-113
TI-2026-32013 CVE-2026-43968 · GHSA-hv23-4qp7-8c8r

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

Priority LOW 28

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00266 Published 2026-05-11 Fixed in 2.16.1 CWE-93